sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. id: CVE-2010-1586 info: name: HP System Management Homepage SMH v2.x.x.x - Open...

CVE-2025-60656

CVE-2025-60656 - Cross-Site Scripting XSS memorizzato sulla Homepage | ---|--- Ricercatori| DotAdrien Gravità| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Descrizione Una vulnerabilità di Cross-Site Scripting XSS memorizzato è presente sulla homepage tramite il modu...

GHSA-VCVR-R3JV-PC5J vulnerabilities

Vulnerabilities for packages: zitadel, peerdb-ui, homepage...

GHSA-M9GG-HP2V-232J vulnerabilities

Vulnerabilities for packages: azurite, pulumi, zitadel, langfuse-fips, librechat, langfuse, homepage, kibana, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, cadence-web...

CVE-2026-101915 vulnerabilities

Vulnerabilities for packages: azurite, pulumi, zitadel, langfuse-fips, librechat, langfuse, homepage, kibana, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, cadence-web...

CVE-2026-101916 vulnerabilities

Vulnerabilities for packages: azurite, pulumi, zitadel, langfuse-fips, librechat, langfuse, homepage, kibana, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, cadence-web...

GHSA-F596-WHHP-79R4 vulnerabilities

Vulnerabilities for packages: azurite, pulumi, zitadel, langfuse-fips, librechat, langfuse, homepage, kibana, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, cadence-web...

CVE-2026-79764

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764

The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) . The /homepage/proxy endpoint accepts a user-provided URL and passes it to http.get or https.get without a destination allowlist. Specifically, the sr...

EUVD-2026-86199

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764: Server-Side Request Forgery (SSRF)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

PT-2026-97922

Name of the Vulnerable Software and Affected Versions Termix versions 2.5.0 through 2.5.0 Description The '/homepage/proxy' endpoint accepts a url query parameter from an authenticated user and passes it to http.get or https.get without destination restrictions. In the file...

CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...

CVE-2026-90893

MISP contains a Cross-Site Request Forgery CSRF vulnerability in the UserSettingsController. The actions setTheme, setHomePage, and eventIndexColumnToggle were explicitly added to the Security component's unlockedActions list, which disabled all CSRF validation both token and field-hash checks fo...

CVE-2026-90893

MISP versions ≤2.5.45 contain a CSRF vulnerability in the UserSettingsController . The actions setTheme , setHomePage , and eventIndexColumnToggle were added to the Security component's unlockedActions list, disabling all CSRF token and field-hash validation for those endpoints. Because these acc...